[175882.466186] audit: type=1400 audit(1503640503.535:62): apparmor="DENIED" operation="sendmsg" profile="/usr/bin/evince" name="/run/systemd/journal/socket" pid=7704 comm="evince" requested_mask="w" denied_mask="w" fsuid=1000 ouid=0
Same here (17.04)
[175882.466186] audit: type=1400 audit(150364050 3.535:62) : apparmor="DENIED" operation="sendmsg" profile= "/usr/bin/ evince" name="/ run/systemd/ journal/ socket" pid=7704 comm="evince" requested_mask="w" denied_mask="w" fsuid=1000 ouid=0
Same here (17.04)